hashicorp/terraform-provider-tls v4.0.0

on GitHub

NOTES:

• Provider has been re-written using the new terraform-plugin-framework (#215).

• resource/tls_cert_request: private_key_pem attribute is now stored in the state as-is; first apply may result in an update-in-place (#87, #215).

• resource/tls_self_signed_cert: private_key_pem attribute is now stored in the state as-is; first apply may result in an update-in-place (#87, #215).

• resource/tls_locally_signed_cert: cert_request_pem, ca_private_key_pem and ca_cert_pem attributes are now stored in the state as-is; first apply may result in an update-in-place (#87, #215).

• resource/tls_private_key: private_key_pem_pkcs8, private_key_openssh and public_key_fingerprint_sha256 attributes are now retro-fitted, depending on version being updated; first apply may result in an update-in-place (#210, #225)).

ENHANCEMENTS:

• resource/tls_private_key: New attribute private_key_pem_pkcs8 (PKCS#8) (#210, #225)).

BREAKING CHANGES:

• resource/tls_cert_request: Attribute key_algorithm is now read-only, as it's inferred from private_key_pem (#174, #215).

• resource/tls_self_signed_cert: Attribute private_key_pem is stored (and returned) as-is (in accordance with guidelines) (#87, #215).

• resource/tls_self_signed_cert: Attribute key_algorithm is now read-only, as it's inferred from private_key_pem (#174, #215).

• resource/tls_self_signed_cert: Setting an unsupported value in allowed_uses attribute, will now return an error instead of just a warning (#185, #215).

• resource/tls_self_signed_cert: Attribute private_key_pem is stored (and returned) as-is (in accordance with guidelines) (#87, #215).

• resource/tls_locally_signed_cert: Attribute ca_key_algorithm is now read-only, as it's inferred from ca_private_key_pem (#174, #215).

• resource/tls_locally_signed_cert: Setting an unsupported value in allowed_uses attribute, will now return an error instead of just a warning (#185, #215).

• resource/tls_locally_signed_cert: Attributes cert_request_pem, ca_private_key_pem, ca_cert_pem are stored (and returned) as-is (in accordance with guidelines) (#87, #215).

• provider: Default value for proxy.from_env is now true, and relies upon httpproxy.FromEnvironment (#224).